On Fri, Oct 03, 2025 at 06:08:27PM +0300, Gregory Edigarov wrote: > hello, > > $ doas rpki-client -v > rpki-client: ta/afrinic: pulling from > https://rpki.afrinic.net/repository/AfriNIC.cer rpki-client: ta/apnic: > pulling from > https://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer > rpki-client: ta/lacnic: pulling from > https://rrdp.lacnic.net/ta/rta-lacnic-rpki.cer rpki-client: ta/ripe: > pulling from https://rpki.ripe.net/ta/ripe-ncc-ta.cer rpki-client: > ta/arin-rfc7730: pulling from > rsync://rpki.arin.net/repository/arin-rpki-ta.cer rpki-client: ta/arin: > pulling from https://rrdp.arin.net/arin-rpki-ta.cer rpki-client: > ta/ripe: loaded from network rpki-client: > https://rrdp.ripe.net/notification.xml: reinitializing rpki-client: > https://rrdp.ripe.net/notification.xml: pulling from network > rpki-client: ta/afrinic: loaded from network rpki-client: > https://rrdp.afrinic.net/notification.xml: reinitializing rpki-client: > https://rrdp.afrinic.net/notification.xml: pulling from network > rpki-client: https://rrdp.ripe.net/notification.xml: downloading > snapshot (172322cf-c642-4e6f-806c-bd2375d8001a#152950) rpki-client: > ta/lacnic: loaded from network rpki-client: > https://rrdp.lacnic.net/rrdp/notification.xml: reinitializing > rpki-client: https://rrdp.lacnic.net/rrdp/notification.xml: pulling > from network rpki-client: ta/apnic: loaded from network rpki-client: > https://rrdp.apnic.net/notification.xml: reinitializing rpki-client: > https://rrdp.apnic.net/notification.xml: pulling from network > rpki-client: https://rrdp.afrinic.net/notification.xml: downloading > snapshot (8fe3109e-2561-4627-8850-83ab94b9bb91#57172) rpki-client: > https://rrdp.apnic.net/notification.xml: downloading snapshot > (1976999f-5bc5-4767-b567-e9d15ac74007#105853) rpki-client: ta/arin: > loaded from network rpki-client: > https://rrdp.arin.net/notification.xml: reinitializing rpki-client: > https://rrdp.arin.net/notification.xml: pulling from network > rpki-client: ta/arin-rfc7730: loaded from network rpki-client: CCR TAS > tree corrupted > > what does it mean, and how to fix?
What's the difference between /etc/rpki/arin-rfc7730.tal and /etc/rpki/arin.tal? I suspect you installed the former before we were allowed to ship it in the OS and the difference is only in the all-caps comment at the top. I'm unsure if there's a real-world use case for having two TALs with the same key and if this is a bug or not. The error message could be a bit more helpful, though. > > OpenBSD 7.8-beta (GENERIC.MP) #36: Sat Sep 27 22:58:29 MDT 2025 > [email protected]:/usr/src/sys/arch/amd64/compile/GENERIC.MP > > > thank you. > > > -- > With best regards, > Gregory Edigarov >
